Question 16
A developer is checking for Cross Site Scripting (XSS) and found that the quick search is not escaped (allows inclusion of Javascript) in the following script:

How would the developer resolve this issue?

How would the developer resolve this issue?
Question 17
A developer has a sandbox with code to log a message during execution, and the following code:

After the code executes, the developer does not see any log file with the message in the WebDAV folder. Which two tasks does the developer need to perform to correct this issue?
Choose 2 answers

After the code executes, the developer does not see any log file with the message in the WebDAV folder. Which two tasks does the developer need to perform to correct this issue?
Choose 2 answers
Question 18
Whichtwo activities should an Architect encourage the replication team to follow based on S2C Commerce best practices?
Choose 2 answers
Choose 2 answers
Question 19
A client receives multiple feeds from third parties on the same SFTP location:
* Product prices (sftp: prod/prices)
* Stores information (sftp: prod/stores;
* Product information (sftp: prod/catalog)
* Categories information (sftp: prod/marketing)
* Content (sftp: prod/marketing)
Some of the feeds are placed on sftp multiple times a day, as the information is updated in the source system.
The Architect decides to have only two jobs:
* One that checks and downloads available feeds every hour
* One that imports the files from Webdav once a day before the data replication, using the standards steps available in the Job Framework Which design is correct for the import Job, taking the steps scope in consideration?
* Product prices (sftp: prod/prices)
* Stores information (sftp: prod/stores;
* Product information (sftp: prod/catalog)
* Categories information (sftp: prod/marketing)
* Content (sftp: prod/marketing)
Some of the feeds are placed on sftp multiple times a day, as the information is updated in the source system.
The Architect decides to have only two jobs:
* One that checks and downloads available feeds every hour
* One that imports the files from Webdav once a day before the data replication, using the standards steps available in the Job Framework Which design is correct for the import Job, taking the steps scope in consideration?
Question 20
Cross-site scripting (XSS) lets attackers inject client-side JavaScripts into a web page viewed by a targeted user. Which encoding will you use in the <isprint> tag to avoid cross site scripting:
<script type="text/javascript"> var data = "<isprint encoding="" value="${unsafeData} "/>"; </script>
<script type="text/javascript"> var data = "<isprint encoding="" value="${unsafeData} "/>"; </script>
